The Patching Friars' AlmanacA calendar of CVE saints

Patron of November 22

Nearest NeighborHoly card for nearest-neighbor, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Nearest Neighbor VICINUS INTRAT
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Nearest Neighbor, Who Came In Through the Neighbour's Wi-Fi

Patron of office Wi-Fi networks, next-door neighbours, and attackers who don't even have to be in town.

Life

On 22 November 2024 Volexity described the Nearest Neighbor attack: a Russian espionage group, too far away to reach the target's Wi-Fi, first breached nearby companies' networks and, hopping from building to building over Wi-Fi, drew close enough to enter the victim's network from the other side of the wall. Once inside it used, among other things, a Windows Print Spooler flaw to escalate privileges (CVE-2022-38028).

Prayer

O Saint Nearest Neighbor, who arrives hopping from network to network, let our wireless networks not trust the neighbour. Amen.

How to celebrate

Celebrated by protecting corporate Wi-Fi with strong authentication and separating it from critical systems, like a good neighbourhood.

Leave the Wi-Fi open and you let in the neighbour's neighbour too.

Technical record

Disclosed on
November 22 2024
CVE
CVE-2022-38028
CVSS
7.8Actively exploited (CISA KEV)
Product
Microsoft · Windows 10 Version 1809

Windows Print Spooler Elevation of Privilege Vulnerability

Sources: volexity.com

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.